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DATA TRANSMISSION IN PACKET-SWITCHED RADIO SYSTEM IMPLEMENTING 
USER EQUIPMENT LOCATION SERVICE 



FIELD 

[0001] The invention relates to a method for transmitting data in a 
5 packet-switched radio system implementing a user equipment location service, 
and to a packet-switched radio system implementing a user equipment loca- 
tion service. 

BACKGROUND 

[0002] Locating user equipment, i.e. defining the geographical loca- 

10 tion of user equipment, is an important function in cellular networks. In the 
United States, the Federal Communications Commission FCC requires that it 
must be possible to locate all user equipment making an emergency call to an 
accuracy of 50 meters. Location can also be utilized for commercial purposes, 
for instance for defining different tariff areas or for implementing a navigation 

15 service instructing a user. A location service (LCS) has until now been devel- 
oped mainly for application to circuit-switched cellular networks, for instance 
the GSM system (Global System for Mobile Communications). 

[0003] Different methods are used in implementing a location ser- 
vice. On the roughest level, the location of user equipment can be positioned 

20 on the basis of the identity of the cell serving the user equipment. This infor- 
mation is not very exact, since the diameter of a cell can be tens of kilometers. 

[0004] A more accurate result is obtained by using as additional in- 
formation the timing information of a radio link, for instance the timing advance 
(TA). In the GSM system, TA shows the location of the user equipment at an 

25 accuracy of approximately 550 metros. The problem is that if the cell is imple- 
mented by an omnidirectional antenna, the location of the user equipment is 
only known in relation to a base station on a circle drawn around it. A base 
station divided into three sectors, for instance, improves the situation some- 
what, but even then, the location of the user equipment can only be positioned 

30 to a 120-degree sector, in an area 550 metros deep, at a certain distance from 
the base station. 

[0005] Even these inexact methods are enough for some applica- 
tions, for instance for defining tariff areas. More accurate methods have also 
been developed. These methods are usually based on several different base 
35 stations taking measurements from a signal transmitted by the user equip- 



ment, the TOA method (Time of Arrival) is an example of these. 

[0006] The user equipment, too, can take measurements from sig- 
nals transmitted by several different base stations, one example of such a 
method is the E-OTD (Enhanced Observed Time Difference) method. In syn- 
5 chronized networks, the user equipment measures the inter-relations of the 
reception time-instances of signals received from different base stations. In 
non-synchronized networks, a location measurement unit (LMU) at a fixed, 
known measurement point also receives the signals transmitted by the base 
stations. The location of the user equipment is defined on the basis of geomet- 

10 rical components obtained from time delays. 

[0007] Another location method is using a GPS (Global Positioning 
System) receiver in the user equipment. A GPS receiver receives a signal 
transmitted by at least four earth-orbiting satellites, on the basis of which it is 
possible to calculate the latitude, longitude and height of the location of the 

15 user equipment. The user equipment can position itself or it can be assisted in 
the positioning. The network part of the radio system can transmit an assisting 
message to the user equipment to speed up the positioning, i.e. the power 
consumption of the user equipment is reduced, The assisting message can 
contain the time, a list of visible satellites, a Doppler phase of a satellite signal 

20 and a search window of a code phase. The user equipment can transmit the 
received information to the network part which then calculates the location. 
The network part of the radio system refers herein to the fixed part of the radio 
system, i.e. the entire system excluding the user equipment. 

[0008] So far, not very much attention has been paid to implement- 

25 ing a location service to packet-switched radio systems, such as GPRS (Gen- 
eral Packet Radio Service) or EGPRS (Enhanced General Packet Radio Ser- 
vice). EGPRS is a GSM-based system utilizing packet-switched transmission. 
EGPRS uses EDGE (Enhanced Data Rates for GSM Evolution) technology to 
increase data transmission capacity. In addition to the GMSK (Gaussian Mini- 

30 mum-Shift Keying) modulation used normally in GSM, it is possible to use 8- 
PSK (8-Phase Shift Keying) modulation for packet data channels. The aim is 
mainly to implement non-real-time data transmission services, such as copying 
a file and using an Internet browser, but packet-switched real-time services for 
speech and video transmission can also be implemented. 

35 [0009] Two different solutions have been defined for a location ser- 

vice in the GSM specifications: a base station system oriented solution and a 



network subsystem oriented solution. In the first solution, a serving mobile lo- 
cation center SMLC is connected to the base station controller, and in the 
second solution, to the mobile switching center. The UMTS specifications only 
define one solution: a radio network oriented solution. The GPRS specifica- 
5 tions also define at least the radio network oriented solution. 

[0010] Some of the above-mentioned location methods require 
communication between user equipment and the location center. In the GSM 
system, this communication is done using a third-layer radio resource location 
services protocol (RRLP). 

10 [0011] In GPRS, the third-layer protocols only reside in the user 

equipment and core network, for instance in the support node SGSN, i.e. a 
radio network does not have third-layer protocols. It is, however, necessary to 
transmit RRLP-type information between the user equipment and the location 
center in the radio network. On the second layer, GPRS has a logical link con- 

15 trol protocol which provides services for third-layer protocols. 

[0012] Using location methods thus usually requires data transmis- 
sion between the user equipment and the location center residing in the net- 
work part of the radio system. In circuit-switched radio systems, data transmis- 
sion is implemented using the services of the third layer of the protocol stack. 

20 This is, however, not possible in packet-switched radio systems, because the 
serving mobile location center is in the radio network of the radio system, but 
the required third layers are in the core network of the radio system. 

BRIEF DESCRIPTION OF THE INVENTION 

[0013] It is an object of the invention to provide an improved 

25 method for transmitting data in a packet-switched radio system implementing a 
user equipment location service, and an improved packet-switched radio sys- 
tem implementing a user equipment location service. One aspect of the inven- 
tion is the method described in claim 1 for transmitting data in a packet- 
switched radio system implementing a user equipment location service. An- 

30 other aspect of the invention is the packet-switched radio system implement- 
ing a user equipment location service, which is described in claim 10. Pre- 
ferred embodiments of the invention are described in the dependent claims. 

[0014] The invention is based on developing a general-purpose so- 
lution, using which it is possible to transmit third-layer messages between user 

35 equipment and a serving mobile location center in a packet-switched radio 



system implementing a location service. 

[0015] The method and apparatus of the invention provide several 
improvements. A radio network oriented solution becomes possible in GPRS. 
Communication between the user equipment and the serving mobile location 
5 center becomes possible. The solution re-uses existing solutions, i.e. it can be 
implemented efficiently. The traffic load of the support node does not increase, 
because the traffic coming from the user equipment is routed directly from the 
radio network to the serving mobile location center, and correspondingly, the 
traffic coming from the serving mobile location center is routed directly from 
10 the radio network to the user equipment. Existing GPRS systems can be up- 
dated with minimal changes to the system specifications to implement the lo- 
cation service. 

BRIEF DESCRIPTION OF THE FIGURES 

[0016] In the following, the invention will be described in greater de- 
15 tail by means of preferred embodiments and with reference to the attached 
drawings in which 

Figure 1 A shows an example of the structure of a cellular network, 
Figure 1B shows the cellular network in greater detail in a block dia- 
gram, 

20 Figure 1C shows a circuit-switched connection, 

Figure 1 D shows a packet-switched connection, 
Figure 2 shows an example of the protocol stacks in certain parts of 
the cellular network, 

Figure 3 is a flow chart illustrating a method for transmitting data in 
25 a packet-switched radio system implementing a user equipment location ser- 
vice. 

DESCRIPTION OF EMBODIMENTS 

[0017] A typical structure of a packet-switched radio system and its 
interfaces to a public switched telephone network and a packet transmission 

30 network are described with reference to Figures 1A and 1B. Figure 1B only 
shows the blocks essential to explaining the embodiments, but it is clear to a 
person skilled in the art that a conventional packet-switched cellular network 
also contains other functions and structures which need not be described in 
greater detail herein. The radio system can, for instance, be a GSM-based 

35 GPRS or EGPRS, a universal telecommunications system UMTS employing 



wideband code division multiple access, or an intermediate form of these sys- 
tems, in which the structure of the radio network is outlined as in UMTS and 
the radio network is called GERAN (GSM Enhanced Radio Access Network), 
for instance, but in which the radio interface is, however, a GSM-based normal 
5 radio interface or a radio interface using EDGE modulation. 

[0018] The description of Figures 1A and 1B is mainly based on 
UMTS. The main parts of the mobile system are a core network CN, a UMTS 
terrestrial radio access network, or radio network UTRAN in short, and user 
equipment UE. The interface between CN and UTRAN is called Iu ; and the air 
10 interface between UTRAN and UE is called Uu. 

[0019] UTRAN is made up of radio network subsystems RNS. The 
interface between RNSs is called lur. RNS is made up of a radio network con- 
troller RNC and one or more nodes B. The interface between RNC and B is 
called lub. The coverage area, i.e. cell, of a node B is marked C in Figure 1B. 
15 RNS can also be called by its more traditional name, base station system 
(BSS), The network part of the radio system thus comprises a radio network 
UTRAN and a core network CN. 

[0020] The description in Figure 1A is very abstract so it is clarified 
in Figure 1 B by indicating approximately which part of the GSM system corre- 
20 sponds to which part in UMTS. It should be noted that the presented descrip- 
tion is in no way binding but for the purpose of illustration, since the responsi- 
bilities and functions of the different parts of UMTS are still being designed. 

[0021] User equipment 150 can, for instance, be fixed, installed in a 
vehicle, or portable. The user equipment 150 is also known as a mobile station 
25 MS. The infrastructure of the radio network UTRAN is made up of radio net- 
work subsystems RNS, i.e. base station systems. A radio network subsystem 
RNS is made up of a radio network controller RNC, i.e. base station controller, 
102 and at least one node B, i.e. base station, 100 controlled by it 

[0022] The base station B has a multiplexer 116, transceivers 114 
30 and a control unit 118 which controls the operation of the transceivers 114 and 
the multiplexer 116. Traffic and control channels used by the transceivers 114 
are placed on the transmission link 160 by the multiplexer 116. 

[0023] The transceivers 1 14 of the base station B are connected to 
an antenna unit 112 which implements a bi-directional radio link Uu to the user 
35 equipment 150. The structure of frames transmitted in the bi-directional radio 
link Uu is exactly defined. 



6 

[0024] The radio network controller RNC comprises a group switch- 
ing field 120 and control unit 124. The group switching field 120 is used for 
speech and data connection and to connect signaling circuits. The base sta- 
tion system formed by the base station B and the radio network controller RNC 
5 also comprises a transcoder 122. Work distribution between the radio network 
controller RNC and the base station B as well as their physical structure can 
vary depending on implementation. Typically, the base station B takes care of 
the radio path implementation as described above. The radio network control- 
ler RNC typically takes care of the following: management of radio resources, 

10 control of handover between cells, power adjustment, timing and synchroniza- 
tion, paging user equipment. 

[0025] The transcoder 122 is usually located as close as possible to 
a mobile switching center 132, because speech can then be transmitted in 
mobile telephone system format between the transcoder 122 and the radio 

15 network controller RNC, saving transmission capacity. The transcoder 122 
converts the different digital coding formats of speech used between the public 
switched telephone network and the mobile network to be compatible with 
each other, for instance from the 64 kbit/s format of a public network to an- 
other (e.g. 13 kbit/s) format of a cellular network and vice versa. The hardware 

20 required is not described in detail herein, but it can be noted that other data 
than speech is not converted in the transcoder 122. The control unit 124 takes 
care of call control, mobility management, collection of statistics, and signal- 
ing. 

[0026] The core network CN comprises an infrastructure belonging 
25 to a mobile telephone system and external to UTRAN. Of the apparatuses be- 
longing to the circuit-switched transmission of the core network CN, Figure 1B 
shows the mobile switching center 132. 

[0027] As shown in Figure 1B, connections (shown as black dots) 
can be made with the switching field 120 to both a public switched telephone 
30 network 134 through the mobile switching center 132 and to a packet-switched 
network 142. A typical terminal 136 in the public switched telephone network is 
a conventional phone or an ISDN (Integrated Services Digital Network) phone. 
Packet transmission is performed from a computer 148 connecting to the mo- 
bile system through the Internet 146 to a portable computer 152 connected to 
35 the user equipment 150. Instead of a combination of the user equipment 150 
and portable computer 152, a WAP (Wireless Application Protocol) phone can 



be used. 

[0028] The connection between the packet transmission network 
142 and the switching field 120 is established by a serving GPRS support 
node (SGSN) 140. The task of the support node 140 is to transmit packets 
5 between the base station system and a gateway GPRS support node (GGSN) 
144, and to record the location of the user equipment 150 in its area. 

[0029] The gateway support node 144 connects the public packet 
transmission network 146 and the packet transmission network 142. An Inter- 
net protocol or an X.25 protocol can be used in the interface. The gateway 

10 support node 144 hides by encapsulation the internal structure of the packet 
transmission network 142 from the public packet transmission network 146 so 
that to the public packet transmission network 146, the packet transmission 
network 142 seems like a sub-network and the public packet transmission 
network 146 can address packets to and receive packets from the user 

15 equipment 150 in it. 

[0030] The packet transmission network 142 is typically a private 
network that uses an Internet protocol and transfers signaling and user data. 
Depending on the operator, the structure of the network 142 may vary in its 
architecture and protocols below the Internet protocol layer. 

20 [0031] The public packet transmission network 146 can be the 

Internet, for instance, and a terminal 148, such as a server, connected to it 
wants to transmit packets to user equipment 150. 

[0032] Figure 1C shows how a circuit-switched transmission link is 
established between the user equipment 150 and the public switched tele- 

25 phone network terminal 136. In the figures, a thick line shows how data is 
transmitted through the system over an air interface 170 from the antenna 1 12 
to the transceiver 114 and from there, after multiplexing in the multiplexer 116, 
over the transmission link 160 to the switching field 120 which has a connec- 
tion to an output to the transcoder 122, and from there on, through a cbnnec- 

30 tion made in the mobile switching center 132 to the terminal 136 connected to 
the public switched telephone network 134, In the base station 100, the control 
unit 118 controls the multiplexer 1 16 in performing the transmission, and in the 
base station controller 102, the control unit 124 controls the switching field 120 
to make a correct connection. 

35 [0033] Figure 1D shows a packet-switched transmission link. A 

portable computer 152 is now connected to the user equipment 150. A thick 



line shows how the data being transmitted advances from the server 148 to 
the portable computer 152. Data can naturally also be transmitted in the oppo- 
site transmission direction, i.e. from the portable computer 152 to the server 
148. The data advances through the system over the airjnterface, i.e. Um in- 
5 terface, 170, from the antenna 1 12 to the transceiver 1 14, and from there, af- 
ter multiplexing in the multiplexer 116, over the transmission link 160 and Abis 
interface to the switching field 120, from which a connection has been estab- 
lished to an output to the support node 140 on the Gb interface, from the sup- 
port node 140, the data is transmitted over the packet transmission network 

10 142 through the gateway node 144 to the server 148 connected to the public 
packet transmission network 146. 

[0034] For clarity's sake, Figures 1C and 1D do not show a case 
where both circuit-switched and packet-switched data is transmitted simulta- 
neously. This is, however, completely possible and common, since free capac- 

15 ity can flexibly be taken into use from circuit-switched data transmission to 
packet-switched transmission. A network can also be built, in which only 
packet data is transmitted. In such a case, the structure of the network can be 
simplified. 

[0035] Let us examine Figure 1D again. The different entities of the 
20 UMTS system - CN, UTRAN/GERAN, RNS/BSS, RNC/BSC, B/BTS - are out- 
lined in the figure by dashed-line boxes. The equipment for packet-switched 
transmission of the core network CN are now described in more detail. In addi- 
tion to the support node 140, packet transmission network 142 and gateway 
node 144, the core network also contains a gateway mobile location center 
25 GMLC 186 and a home location register HLR 184. The task of the gateway 
mobile location center 186 is to provide the service in question to an external 
location service client 188. The home location register 184 contains subscriber 
information and routing information of the location service. In principle, the 
general architecture of a location service is a client/server architecture which 
30 comprises the location service client 188 and the server 186 providing the ser- 
vice. 

[0036] In addition, of the apparatuses required by the location ser- 
vice, Figure 1D shows a serving mobile location center SMLC 182 which can, 
as described, be a separate apparatus connected to the radio network control- 
35 ler RNC, or the serving mobile location center can also be in the radio network 
controller RNC, for instance in its control unit 124. The figure also shows a 



location measurement unit LMU 180 which can be either in the base station B, 
for instance in its control unit 118, or a separate apparatus connected to the 
base station B. The task of the location measurement unit 180 is to make ra- 
- dio measurements possibly required in the location method. 
5 [0037] Figure 1 D also shows the structure of the user equipment 

UE with respect to the parts of interest to the present application. The user 
equipment UE comprises an antenna 190 through which a transceiver 192 
receives signals from a radio path 170. The operation of the user equipment 
UE is controlled by a control unit 194 which is typically a microprocessor with 

10 the necessary software. Protocol processing described later is also performed 
with said software. In addition to the described parts, the user equipment UE 
comprises a user interface, which typically contains a loudspeaker, micro- 
phone, display and keyboard, and a battery. These are, however, not de- 
scribed in more detail herein,, because they are not of interest to the present 

1 5 invention. 

[0038] The structure of the transceiver in the base station B or the 
structure of the transceiver in the user equipment are not described in more 
detail herein, because it is clear to a person skilled in the art how said appara- 
tuses are implemented. It is, for instance, possible to use a normal radio net- 
20 work transceiver and user equipment transceiver according to EGPRS. For the 
present application it is only important that the radio link 170 can be imple- 
mented, since the operation required by the application is then performed on 
the higher OS! (Open Systems Interconnection) model layers, especially on 
the third layer. 

25 [0039] Figure 2 shows packet protocol stacks of the EGPRS control 

plane. It should, however, be noted that the embodiments are not limited to 
EGPRS. The protocol stacks are formed according to the OSI model of ISO 
(International Standardization Organization). In the OSI model, the protocol 
stacks are divided into layers. In principle, there can be seven layers. Figure 2 

30 shows for each network element, which packet protocol parts are processed in 
the network element in question. The network elements are the mobile station 
MS, base station system BSS, support node SGSN and serving mobile loca- 
tion center SMLC. The base station and base station controller are not shown 
separately, because an interface has not been defined between them. The 

35 protocol processing set for the base station system BSS can thus in principle 
be distributed freely between the base station 100 and the base station con- 
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trailer 102, not however the transcoder 122 even though it does belong to the 
base station system BSS. The network elements MS, BSS and SGSN are 
separated by interfaces Urn and Gb between them. 

[0040] A layer in each apparatus MS, BSS, SGSN, SMLC commu- 
5 nicates logically with a layer in another apparatus. Only the lowest, physical, 
layers communicate directly with each other. Other layers always use the ser- 
vices provided by the next lower layer. A message must thus physically ad- 
vance vertically between the layers and only in the lowest layer does the mes- 
sage advance horizontally between the layers. 

10 [0041] The actual bit-level data transmission is always done using 

the lowest first, i.e. physical, layer RF, L1 . The physical layer defines the me- 
chanical, electronic and functional properties for connecting to the physical 
transmission path. The next, second layer, i.e. data link layer, uses the ser- 
vices of the physical layer for the purpose of implementing reliable data trans- 

15 mission by taking care of transmission error correction, for instance. On the air 
interface 170, the data fink layer divides into an RLC/MAC (Radio Link Control 
/ Medium Access Control) sub-layer and an LLC (Logical Link Control) sub- 
layer, i.e. a logical link control protocol. The third layer, i.e. network layer, pro- 
vides the higher layers independence from data transmission and switching 

20 techniques which take care of the connections between the apparatuses. The 
network layer takes care of connection establishment, maintenance and re- 
lease, for instance. In GSM, the network layer is also called a signaling layer. It 
has two main tasks: routing messages and enabling several independent con- 
nections simultaneously between two entities. 

25 [0042] The network layer comprises a session management sub- 

layer SM and a GPRS mobility management sub-layer GMM. 

[0043] The GPRS mobility management sub-layer GMM takes care 
of the consequences caused by the movement of the user of the mobile sta- 
tion that are not directly related to radio resource management. On the side of 

30 the public switched telephone network, this sub-layer would take care of verify- 
ing the user and connecting the user to the network. In a cellular network, this 
sub-layer supports user mobility, registration and management of data gener- 
ated by mobility. In addition, this sub-layer checks the identity of the mobile 
station and the identities of the allowed services. Message transmission of this 

35 sub-layer takes place between the mobile station MS and the support node 
SGSN. 
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[0044] The session management sub-layer SM manages all func- 
tions related to packet-switched call management, but does not detect the 
movement of the user. The session management sub-layer SM establishes, 
maintains and releases connections. It has its own procedures for calls initi- 
5 ated by and terminating to the mobile station 150. The message transmission 
of this sub-layer, too,- takes place between the mobile station MS and the sup- 
port node SGSN. 

[0045] In the base station system BSS, the messages of the ses- 
sion management sub-layer SM and GPRS mobility management sub-layer 
10 GMM are processed transparently, i.e. they are only transferred back and 
forth. 

[0046] The logical link control protocol LLC establishes a reliable 
encrypted logical link between SGSN and MS. LLC is independent of the lower 
layers so that the changing of the air interface would affect the network part of 

15 the mobile network as little as possible. The services of the logical link control 
protocol include: a very reliable logical link between peer entities, support for 
variable-length information frames, support for both acknowledged and unac- 
knowledged data transmission, each frame contains an unambiguous identifier 
of a transmitting or receiving mobile station, support for different service crite- 

20 ria, such as different priorities of data transmission, encryption of the transmit- 
ted data and user identity. LLC data is transmitted between the Um and Gb 
interfaces by a logical link control protocol relay LLC RELAY. 

[0047] The MAC layer is responsible for the following tasks: multi- 
plexing data and signaling on both uplink (mobile station to network part) and 

25 downlink (network part to mobile station) connections, management of uplink 
transmission path resource requests, and allocation and timing of downlink 
transmission path traffic resources. Traffic priorisation management also be- 
longs to this layer. The RLC layer takes care of transmitting LLC-layer data, 
i.e. LLC frames, to the MAC layer; RLC chops the LLC frames into RLC data 

30 blocks and transmits them to the MAC layer. In the uplink direction, RLC builds 
LLC frames of the RLC data blocks and transmits them to the LLC layer. The 
physical layer is implemented in the Um interface by a radio link, for instance 
an air interface defined by GSM. Carrier modulation, interleaving and error- 
correction in the data to be transmitted, synchronization and transmitter power 

35 control are performed on the physical layer. 

[0048] A BSSGP (Base Station Subsystem GPRS Protocol) layer 



transmits data of the higher layers and information related to routing and qual- 
ity of service between BSS and SGSN. The FR (Frame Relay) layer performs 
the physical transmission of this information. NS (Network Service) transmits 
messages according to the BSSGP protocol. 
5 [0049] So as to be able to implement the data transmission link be- 

tween the mobile station MS and the serving mobile location center SMLC, 
there is a modified third-layer radio resource protocol RRLP-PS set on top of 
the packet protocol stack of the mobile station MS, and a modified logical link 
protocol LLC-LE is set on the second layer. The abbreviation PS refers to 
10 packet-switching and the abbreviation LE to a location extension required by 
the location service to the protocol. In a preferred embodiment, the radio re- 
source protocol RRLP-PS is a modified radio resource location service proto- 
col, 

[0050] The data transmitted in the messages of the radio resource 
15 protocol RRLP-PS usually relates to one of the following location service mes- 
sages: request to define the location of a mobile station, message to provide 
the location of a mobile station, message containing data assisting in location, 
acknowledgment of data assisting in location, and protocol error message. In 
addition, other kind of data can be transmitted jis described between a mobile 
20 station MS and another functionality related to the serving mobile location cen- 
ter SMLC as required. 

[0051] The modified logical link protocol LLC-LE provides at least 
the following functionality: 

- one or more logical link connections separated from each other by 
25 DLCI (Data Link Connection Identifier), 

- sequence control which maintains the order of frames in a logical 
link connection, 

- detection of transmission errors, format errors and operational er- 
rors in a logical link connection, and recovery from said errors, 

30 - sending a notification on errors from which recovery is not possi- 

ble, 

- flow control, 

- encryption. 

[0052] In a preferred embodiment, the logical link control protocol 
35 LLC-LE is similar to the logical link control protocol between a mobile station 
and a support node SGSN belonging to the core network of the radio system 
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in a public packet radio service. 

[0053] In addition, the radio network, i.e. base station system BSS 
in our example, comprises a second-layer logical link control relay LLC RELAY 
set in the packet protocol stack and having a modified functionality. 
5 [0054] Further, the serving mobile location center SMLC comprises 

a third-layer modified radio resource protocol RRLP-PS set on top of the 
packet protocol stack and a modified logical link protocol LLC-LE set on the 
second layer. 

[0055] Novelties in comparison with prior art are preferably imple- 
10 mented by software, in which case relatively simple software changes are re- 
quired to exactly limited functions in the radio network and user equipment. 
The user equipment UE comprises means 194 for implementing the function- 
ality defined by the packet protocol stack. Similarly, the radio network, i.e. 
base station system BSS in our example, for instance its base station control- 
15 ler, comprises means 124 for implementing the functionality defined by the 
packet protocol stack. The radio network BSS also comprises means 1 82 for 
processing the packet protocol stack in the serving mobile location center. 
Said means can be implemented for instance by a software executed in a 
general-purpose processor, in which case the different protocols of the proto- 
20 col stacks are software components implementing the required functionality. A 
hardware implementation is also possible, for instance by ASIC (Application 
Specific Integrated Circuit) or as a control logic made up of separate compo- 
nents. 

[0056] In a preferred embodiment, the logic link control protocol 
25 LLC-LE comprises means for setting its own service access point identifier 
(SAP!) to a radio resource protocol message in a logical link protocol frame. 
This makes it easier to distinguish different types of messages from each 
other, especially in the logical link control protocol relay LLC RELAY. 

[0057] In a preferred embodiment, the logical link control protocol 
30 LLC-LE comprises means for using a separate address space for the logical 
link control protocol frames which contain a radio resource protocol message. 
This makes the processing of the frames more efficient. 

[0058] In a preferred embodiment, the logical link control protocol 
relay LLC RELAY comprises means for examining the service access point 
35 identifier of the logical link control protocol message received from a mobile 
station MS and for routing said message to the serving mobile location center 



SMLC if the service access point identifier is that of a radio resource protocol. 

[0059] Even though the example in Figure 2 only shows one mobile 
station MS, the logical link control protocol LLC-LE in the serving mobile loca- 
tion center SMLC comprises means for supporting more than one simultane- 
5 ous radio resource protocol entities residing in different user equipment UE, 
and thus also more than one third-layer entities. 

[0060] Defining the location of user equipment refers to finding out 
the geographical location of the user equipment and giving it in longitudes and 
latitudes. Either the user equipment, i,e. its user, or an external location ser- 

10 vice client to the radio system may be interested in the location. The route 
traveled by the user equipment is tracked in such a manner that the user 
equipment transmits to the core network at regular intervals a request mes- 
sage which requests the definition of the location of the user equipment. Fig- 
ure 2 also shows how the traffic between the serving mobile location center 

15 SMLC and the support node SGSN can be implemented. This traffic is re- 
quired for instance for the transmission of the location service requests re- 
ceived from the client 188 from the gateway location center 186 to the serving 
mobile location center 140. The packet protocol stack of the serving mobile 
location center SMLC on the right shows the protocols required by the traffic. 

20 Thus a modified BSSGP layer, i.e. BSSGP-LE is required, and a correspond- 
ing BSSGP-LE also in the support node SGSN. 

[0061] The data assisting in location refers for instance to the as- 
sisting message described earlier which contains information for a more effi- 
cient use of the GPS system. Such assisting messages can be transmitted on 

25 the broadcast channel of the system, and their use is chargeable. Therefore, 
said assisting message may be encrypted, and user equipment must request 
from the network the encryption key to decrypt said encryption. 

[0062] With reference to Figure 3, the following describes the steps 
taken in the method for transmitting data in a packet-switched radio system 

30 implementing a user equipment location service. The data is transmitted using 
a data transmission link between user equipment UE of the radio system and 
a location center 182 in the radio network GERAN of the radio system. Data 
can be transmitted in both transmission directions, i.e. from the user equip- 
ment UE to the serving mobile location center 182 and from the serving mobile 

35 location center 182 to the user equipment UE. The example of Figure 3 shows 
a general case in which the parties of the data transmission link are called a 



first and a second party, The first party can thus be the user equipment UE or 
location center 1 82 and correspondingly, the second party can be the location 
center 1 82 or the user equipment UE. 

[0063] The execution of the method is started in block 300. In block 
5 302, the data to be transmitted is placed in a message of the third-layer radio 
resource protocol RRLP-PS set on top of the packet protocol stack residing in 
the first party of the data transmission link. 

[0064] In block 304, the radio resource protocol message is trans- 
mitted to the radio network GERAN using the logical link control protocol LLC- 
10 LE set on the second layer of the packet protocol stack. 

[0065] In block 306, the logical link control protocol relay LLC RE- 
LAY set on the second layer of the packet protocol stack in the radio network 
GERAN directs the logical link protocol message to the second party of the 
data transmission link. 
15 [0066] In block 308, the second-layer logical link control protocol 

LLC-LE residing in the second party of the data transmission link and set on 
the packet protocol stack transmits the radio resource protocol message to the 
radio resource protocol RRLP-PS set on the third layer. 

[0067] In block 310, the second party of the data transmission link 
20 disassembles the transmitted data from the radio resource protocol message. 

[0068] As can be seen from the attached claims, the method can 
be modified using the preferred embodiments of the radio system described 
above. 

[0069] Even though the invention has been explained in the above 
25 with reference to examples in accordance with the accompanying drawings, it 
is obvious that the invention is not restricted to them but can be modified in 
many ways within the scope of the inventive idea disclosed in the attached 
claims. 



